Live data from Hacker News

Two Factor Auth List of Websites

twofactorauth.org

21–30 of 65 posts

Re: Two Factor Auth List of Websites

#23
post #14

TradeKing definitely needs to be added to this list. They should be prominently featured at the top in a security hall of shame for their cartoonish security. Edit, examples: No 2 factor authentication Displaying the answers to your security questions in multiple choice form (with a none of the above option, but usually including your answer). Requiring your password to be entered with mouse clicks at an on-screen ke…

> Displaying the answers to your security questions in multiple choice form (with a none of the above option, but usually including your answer).

Kill it before it lays eggs.

> Requiring your password to be entered with mouse clicks at an on-screen keyboard. Not kidding.

  [x] Bad security
  [x] Bad usability
  (Edit: apparently unicode checkmarks are filtered out on input now)
This is like the personification of a lose-lose interpretation of AviD's rule of usable security.

Re: Two Factor Auth List of Websites

#24

OT: Just in case webdevs reads this: you might want to markup clickable things as clickable ( ). If you need a datapoint: I'm using Vimium for Chrome.

Also, I think there should be an option to show all of the websites. I don't want to keep clicking to see which websites I use, I just want to browse by scrolling.

Re: Two Factor Auth List of Websites

#25
post #24

OT: Just in case webdevs reads this: you might want to markup clickable things as clickable ( ). If you need a datapoint: I'm using Vimium for Chrome.

Also, I think there should be an option to show all of the websites. I don't want to keep clicking to see which websites I use, I just want to browse by scrolling.

Does something like https://twofactorauth.org/data.json satisfy? It's not the most usable interface, but it should have all the data.

Re: Two Factor Auth List of Websites

#27

OT: Just in case webdevs reads this: you might want to markup clickable things as clickable ( ). If you need a datapoint: I'm using Vimium for Chrome.

Hmmm, what are you seeing that's not clickable? I don't use vimium and I can click on the site name, docs links, and tell-them-to-two-factor-via-twitter.

Whoop. Looks like the tiling system is relying on JavaScript instead of tags for links:

``` Communication ```

The contributors are pretty responsive, so I'd recommend noting the issue: https://github.com/2factorauth/twofactorauth/issues

Re: Two Factor Auth List of Websites

#30

2FA is trivial to add. https://www.authy.com/ Just do it.

Thanks for the reference. For end-users, they claim that their app will work on multiple devices whereas Google Authenticator only works on one. That would be a big advantage - I'm worried about losing my phone even with backup codes in my wallet. Worst case situation is that I'm robbed and have to hand over phone and wallet!

Also, I'm not aware of Google Authenticator being updated. Which makes me concerned that it's not a priority for Google and might be end-of-lifed.

Post reply on HN